CVE-2011-1167

Published: 28 March 2011

Heap-based buffer overflow in the thunder (aka ThunderScan) decoder in tif_thunder.c in LibTIFF 3.9.4 and earlier allows remote attackers to execute arbitrary code via crafted THUNDER_2BITDELTAS data in a .tiff file that has an unexpected BitsPerSample value.

Status

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1167
• http://www.zerodayinitiative.com/advisories/ZDI-11-107
• https://usn.ubuntu.com/usn/usn-1102-1
• NVD
• Launchpad
• Debian

Bugs

• https://bugzilla.redhat.com/show_bug.cgi?id=684939
• http://bugzilla.maptools.org/show_bug.cgi?id=2300